Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/247a7f80-89fb-3674-9c15-94ae4f9feefe.roa
File:                     247a7f80-89fb-3674-9c15-94ae4f9feefe.roa (raw, json)
Hash identifier:          Td8/VOh/oJljQD1Efd9uWyIcixfZS4JlzkmZizsLlwQ=
Subject key identifier:   85:05:A5:D4:74:01:3E:3F:A9:69:CB:93:91:8D:70:99:37:D8:81:2B
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F4328584E9DCEBD4CAC49BC87570BD740
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/247a7f80-89fb-3674-9c15-94ae4f9feefe.roa
Signing time:             Sat 25 Jul 2026 13:26:59 +0000
ROA not before:           Sat 25 Jul 2026 13:26:59 +0000
ROA not after:            Fri 23 Oct 2026 13:26:59 +0000
asID:                     136725
IP address blocks:        107.149.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:ce:bd:4c:ac:49:bc:87:57:0b:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Jul 25 13:26:59 2026 GMT
            Not After : Oct 23 13:26:59 2026 GMT
        Subject: CN=084648d0-be98-438c-89e2-4c5fc67ea7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:cd:ec:19:fc:f8:9d:1d:f6:77:c8:94:9a:
                    58:cb:58:1b:c4:a7:e2:6e:b6:9a:32:0f:c5:7b:22:
                    c8:e9:d5:95:06:92:9c:7e:f2:06:33:2c:48:f4:cf:
                    25:11:ed:f6:6a:85:bc:44:89:bf:a1:a7:79:6b:41:
                    69:0f:0f:7b:43:2a:a9:20:e2:09:28:ba:fd:af:e9:
                    b0:df:b7:62:49:a9:5d:fb:70:fd:d6:9e:46:54:86:
                    53:57:99:b9:0a:fe:0d:dd:4d:24:2d:ec:b7:2a:a5:
                    9a:cd:3a:d7:49:9a:05:22:ec:1b:a1:c1:af:06:20:
                    c2:01:75:60:1a:dd:8c:d7:08:89:f6:05:e6:eb:34:
                    21:de:7f:e3:bf:6c:22:0d:f3:90:95:42:38:7b:6d:
                    16:36:24:6d:8c:c4:ff:99:fa:5b:ba:ed:8b:8e:d2:
                    c5:63:4b:bd:23:11:dc:6f:be:20:41:2e:c4:b5:b3:
                    2d:56:cb:99:0b:1c:d2:33:94:d3:b5:0d:94:56:d4:
                    b3:f3:c4:12:bc:6e:1f:47:6e:72:ea:7a:15:fb:64:
                    ec:37:2d:84:30:cc:66:53:73:f6:94:85:32:a1:a1:
                    68:1c:6a:02:11:47:14:1c:1f:2d:59:a6:a5:30:f9:
                    01:48:1e:e3:a7:1f:5a:9d:9e:fe:a4:f4:2e:e9:0a:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:05:A5:D4:74:01:3E:3F:A9:69:CB:93:91:8D:70:99:37:D8:81:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/247a7f80-89fb-3674-9c15-94ae4f9feefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.149.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:73:19:96:f0:5a:f6:c9:0e:d1:86:45:61:5c:fb:6f:a5:
         7e:fc:84:48:5c:35:52:f1:d4:37:8d:45:c9:06:82:bf:aa:ea:
         97:cb:69:00:c9:34:38:5a:6c:4c:d5:93:15:15:19:31:16:e7:
         3c:0d:6d:e9:2a:9f:00:d1:a7:80:86:61:5d:05:01:bb:49:e4:
         22:11:2c:7f:ab:10:3e:4e:83:ca:c1:29:57:2e:6b:a0:97:8c:
         75:21:38:a5:81:5f:33:42:8e:63:53:4c:b1:cd:a5:ec:25:ed:
         c4:b4:3a:a9:16:18:c1:50:cd:a5:23:86:bf:41:8d:f4:c5:27:
         11:98:80:be:dd:ae:7c:de:cd:f3:24:33:56:e3:dc:10:4f:ec:
         1d:ad:0e:6e:d2:34:64:e9:8a:03:ce:95:43:1f:8c:ac:2e:5f:
         78:84:a9:b3:32:06:1c:e2:a3:fa:4a:b7:60:ca:c9:e9:5e:05:
         6f:c2:99:85:a9:26:43:70:cb:8e:ee:a8:2a:41:38:e1:f2:65:
         b5:9d:d9:c8:8f:c2:9c:fd:a4:67:1a:8b:23:03:a3:8c:ba:bb:
         ff:3f:8d:aa:44:67:af:2d:18:c4:06:a0:34:bd:9c:c7:4b:b5:
         ee:fd:86:15:09:49:52:ff:64:79:06:54:bc:8b:cd:20:1b:50:
         87:f2:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:27 2026 by rpki-client